Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
File: ES1lq7x-8AUScohER5KrhvsVwu4.mft (raw, json)
Hash identifier: 8IxCWWxhKdlN6bKQJ6Vpj+w2QzSIVCzogCCUzNojth0=
Subject key identifier: BC:5A:BC:C3:9E:AA:31:38:C1:0C:01:6E:4D:23:8E:E7:14:F0:1A:21
Authority key identifier: 11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE
Certificate issuer: /CN=112d65abbc7ef005127288444792ab86fb15c2ee
Certificate serial: 018F88923CD4EB133348DFE81DFEE1F7E2B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
Manifest number: 02FA
Signing time: Fri 17 May 2024 22:00:35 +0000
Manifest this update: Fri 17 May 2024 22:00:35 +0000
Manifest next update: Sat 18 May 2024 22:00:35 +0000
Files and hashes: 1: ES1lq7x-8AUScohER5KrhvsVwu4.crl (hash: VjqPEYsRYAcStQVsXxONZylW1euiOL0YQmLcR3S9DT8=)
2: VLFQ0p78z6yvLoNi8qi0SzcRt4A.roa (hash: ncmbENbsQ00Ayp8Z1sZFNlyLjNORQXJ4UryZR1ZBcPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:92:3c:d4:eb:13:33:48:df:e8:1d:fe:e1:f7:e2:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112d65abbc7ef005127288444792ab86fb15c2ee
Validity
Not Before: May 17 22:00:35 2024 GMT
Not After : May 18 22:00:35 2024 GMT
Subject: CN=bc5abcc39eaa3138c10c016e4d238ee714f01a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:80:f7:ed:54:2d:19:39:cf:cf:62:73:96:79:
d1:db:4a:95:53:8c:2d:d9:67:b7:72:33:d1:40:69:
ca:93:3d:46:af:4f:7e:cc:96:54:f6:b9:0b:1c:6c:
fc:35:41:2c:a7:60:ec:9c:ba:c3:34:f9:5d:a2:f8:
a1:52:db:d0:d3:76:ab:c5:98:16:95:62:86:c3:2a:
b0:19:e8:d5:dd:ce:e7:a5:72:52:5b:a9:71:7b:fe:
63:5b:95:fb:d3:55:16:75:0d:6f:fa:cd:c5:7d:9d:
70:7b:e8:1e:7f:4c:10:ae:c4:af:55:ad:ff:58:0e:
cd:a9:2f:2f:bf:b8:8e:9a:9f:d7:ce:95:68:04:ab:
ad:82:a7:72:e3:94:fa:2f:71:57:0e:ff:77:e9:d6:
91:fc:f6:f8:0d:97:e4:25:10:7e:b9:3d:67:fa:4d:
5e:91:b7:30:69:61:10:47:4c:fe:fa:f7:a6:cd:c2:
ce:0e:13:7e:5a:ea:97:3e:af:48:ce:6b:b7:d7:3b:
15:a0:33:b1:8b:36:d3:4b:ac:f4:3c:85:b9:a4:7a:
65:a0:29:3e:6f:05:03:d4:c7:f9:ab:17:cc:5a:c1:
4d:91:20:8f:d5:1d:53:8e:60:12:26:76:9b:35:a6:
b2:b1:20:a0:fb:1e:90:40:0b:21:d0:8a:1b:c7:1c:
ca:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5A:BC:C3:9E:AA:31:38:C1:0C:01:6E:4D:23:8E:E7:14:F0:1A:21
X509v3 Authority Key Identifier:
keyid:11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:44:a1:25:3e:df:59:f3:2f:e9:49:e0:44:26:7c:a8:df:5a:
b7:94:c2:cc:e7:69:27:d9:00:ed:40:7d:dc:21:0c:e2:ae:f8:
c4:3b:cf:ca:ef:2e:12:57:ba:88:f1:31:b2:15:24:97:d3:b5:
5b:4f:95:4c:3f:23:30:8b:72:60:37:41:f7:83:1d:fe:d6:59:
67:10:c3:ab:fd:52:cc:be:b5:1c:8c:65:cf:33:0e:f3:10:92:
32:a0:26:03:0d:57:ae:45:91:b0:9c:d0:23:50:8c:a1:e6:62:
68:5b:54:a0:0b:07:de:83:f5:57:cf:7c:51:a3:b6:05:b6:a8:
ca:09:c5:aa:8b:fb:8c:ac:d6:60:3c:d4:98:3b:07:9b:e8:3c:
01:81:d8:2d:b8:c6:55:01:02:27:e9:01:04:20:cc:7c:05:10:
df:64:ca:fd:69:1d:a6:e6:a6:1a:ed:0a:40:da:c3:89:ba:e5:
c8:82:75:d1:31:02:ce:63:8c:b5:c2:f7:d2:2f:84:a9:69:e0:
45:c7:b0:67:16:74:ed:a8:bc:40:67:fa:ac:0e:75:37:b4:09:
0e:07:b9:58:d5:aa:cb:50:d8:b2:b4:54:af:4a:2f:c2:8d:72:
26:bd:95:b2:c5:65:d5:58:fa:a1:d0:7e:f2:f6:b8:06:b4:a3:
bd:bf:4b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:42:36 2024 by rpki-client on console-ams.rpki-client.org